bumping rails version to patch the latest vulnerability